EUVD-2025-178539

Malicious code in hermes-config-unuk-aurora npm...

Malicious code in parsec-oauth-jsonp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179604

Malicious code in config-ophiuchus-levels-version npm...

EUVD-2025-178148

Malicious code in leda-jsonp-dependencies-eslint-config npm...

EUVD-2025-179958

Malicious code in build-commitlint-config-angular-lithosphere-string npm...

EUVD-2025-176928

Malicious code in publish-ichnology-eslint-config-luna npm...

Malicious code in quark-eslint-config-materialize-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176662

Malicious code in rest-nova-nightwatch-commitlint-config-angular npm...

EUVD-2025-177572

Malicious code in node-config-private-zenobia-perseus npm...

EUVD-2025-179050

Malicious code in eslint-config-antares-deneb-scorpius npm...

EUVD-2025-179634

Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...

EUVD-2025-175971

Malicious code in tethys-deimos-spinner-eslint-config npm...

EUVD-2025-176558

Malicious code in sagitta-polaris-configstore-commitlint-config-angular npm...

EUVD-2025-176368

Malicious code in singularity-bunyan-eslint-config-publish npm...

EUVD-2025-175417

Malicious code in zephyr-auriga-node-config-wolf npm...

EUVD-2025-176581

Malicious code in run-script-yaml-fomalhaut-eslint-config npm...

MAL-2025-187040 Malicious code in foundation-node-config-farout-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-regulus-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602504708c1fa23065534bfce58fb93eb8c0713426b28a6b5331ac55f1425922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-speleology-sadr-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2115877a86f398809a8cd4e24914e3278660470c511e3a1fd3feac3b5e1ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188310 Malicious code in node-config-private-zenobia-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c726f498d965d5ca0aa4bf03817a0858351167b13332a7cedf47df996d3a0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...